Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/20Wk1FEl8AiokdL5yT683OkzB9c.roa
File:                     20Wk1FEl8AiokdL5yT683OkzB9c.roa (raw, json)
Hash identifier:          KS7OGaxkWSvWG3efJIHj73H+VA77cBJ6p322TwxGU0E=
Subject key identifier:   DB:45:A4:D4:51:25:F0:08:A8:91:D2:F9:C9:3E:BC:DC:E9:33:07:D7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       03E70E0F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/20Wk1FEl8AiokdL5yT683OkzB9c.roa
Signing time:             Sat 05 Feb 2022 15:15:18 +0000
ROA not before:           Sat 05 Feb 2022 15:15:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65474063 (0x3e70e0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb  5 15:15:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=db45a4d45125f008a891d2f9c93ebcdce93307d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:54:48:54:d1:6a:42:03:6c:90:09:8a:96:
                    80:70:79:13:9d:e3:83:42:59:de:be:91:cf:98:a9:
                    8d:14:ba:9a:a1:b7:ca:7f:81:85:ea:29:36:6d:e9:
                    8b:9a:60:66:9b:3e:7d:1f:75:71:d8:89:dd:ad:04:
                    a3:7a:ce:7e:01:a8:5a:20:dd:cf:5e:bd:fe:a4:2b:
                    86:47:a0:ea:c9:de:b9:da:d1:f6:5e:47:e5:8c:52:
                    da:92:1d:ab:df:f0:29:a3:52:ba:04:71:8f:ff:da:
                    4a:95:cf:8c:49:44:17:16:c8:bb:77:95:12:ce:72:
                    99:7b:33:b4:d5:ba:8a:b7:cd:b9:ee:be:73:22:44:
                    dd:f2:0c:f7:fb:13:b1:66:57:8c:a0:85:b0:a3:c5:
                    57:30:b9:3e:bf:50:b8:f0:80:72:81:f9:4f:d5:4c:
                    79:7b:83:b4:8c:68:c0:b7:91:6c:2f:12:79:7d:e4:
                    5c:8b:9c:1b:e6:30:77:f7:ac:fa:68:c9:7c:93:a2:
                    87:b0:3e:92:9d:cf:0a:7b:87:08:f9:82:05:40:f3:
                    98:fb:9a:0e:ed:95:a4:45:59:20:c9:32:e8:aa:7c:
                    9f:c6:9a:03:f1:b5:49:de:1f:bd:78:e9:c6:eb:87:
                    af:0b:b2:89:1a:a8:ab:0c:54:4a:4d:c3:a5:03:84:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:45:A4:D4:51:25:F0:08:A8:91:D2:F9:C9:3E:BC:DC:E9:33:07:D7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/20Wk1FEl8AiokdL5yT683OkzB9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:30:b6:9a:ce:67:c3:df:2b:6b:f3:77:46:62:26:eb:2f:2a:
         1c:44:92:bd:ff:13:51:78:60:9e:39:20:d0:4a:d1:4c:e8:fc:
         64:cd:24:6d:5b:53:23:93:5a:6f:82:35:94:94:30:13:89:45:
         dc:f6:09:3b:a0:f0:9b:33:ca:9e:e0:e7:de:c5:94:98:70:f4:
         bb:cc:ad:04:e2:d8:ac:49:71:d8:36:36:50:f9:db:16:c6:6f:
         ef:b0:af:13:db:3a:f6:d1:64:dc:aa:91:17:18:5e:a2:22:94:
         60:5a:5e:c6:df:e6:bd:5a:aa:8f:26:15:ba:58:b7:39:46:0b:
         b6:03:0e:66:96:36:a2:65:ee:66:dc:b0:f4:b3:cd:2c:3a:d8:
         5f:0b:ae:7d:7d:62:7e:62:d6:7e:32:7f:0f:ce:c3:25:16:0d:
         fc:b6:dd:63:5a:2b:42:e4:82:2c:ca:1a:be:22:64:e2:f5:90:
         d3:01:bc:c6:f0:b1:85:6f:a5:59:a2:01:b3:81:d5:3b:e4:b5:
         b3:98:15:19:33:4b:5e:72:d1:93:12:eb:b4:29:31:00:28:cb:
         c0:75:94:89:9d:00:8a:2a:81:82:75:1c:11:ac:9f:50:fb:b5:
         4c:48:de:be:5d:26:d7:3f:09:a0:13:e1:1f:29:f3:2a:d9:68:
         9a:62:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----